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DETAILED ACTION 

1 . This action is in response to the request for re-consideration filed on 02/03/2009. 

2. Claims 1-13 are pending. Claims 1-2, 6, 8 and 9-13 have been amended. 

3. Claims objections of 5-6, 8 and 1 3 have been withdrawn. 

4. Claims rejections 9-13 have been withdrawn. 

Response to Amendment 

5. Applicant's arguments, see pages 7-12, filed on 02/03/2009, with respect to the 
rejection(s) of claim(s) 1 -2,9-1 0 under 35 U.S.C § 1 02(b) and 3-4 and 11-12 under 35 
U.S.C § 103(a), have been fully considered but are moot in view of the new ground(s) 
of rejection. 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

7. Claims 1-4, 9 and 10-12 are rejected under 35 U.S.C 103(a) as being 
unpatentable over Shiraishi et al (JP 2002-149497) (hereinafter Shiraishi). 
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As per claim 1, Shiraishi discloses " An information management apparatus for 
processing data containing personal data comprising" as ( Page 1, paragraph 0001, 
line 1-2, The privacy information protection system): " personal data extraction 
means for extracting personal data from processing-object data" as ( page 2, 
paragraph 0005, line 1-2, An information acquisition means to acquire the privacy 
information as which this invention was inputted by the user and Fig on page 5, 
inputting data at the numeral 1 is the data extraction from the database numeral 
4 ) ; "unique code generation means for performing an operation using one-way function 
on the basis of personal data extracted by said personal data extraction means, to 
generate a unique code" as (page 3, paragraph 0011, line 2-4, The coupler 
combines the privacy information inputted without minding the identification 
information and the hash processor by which has processing was carried out to 
generate an unique key and Fig on page 5, output from numeral 2 is the unique 
code of the personal data from the numeral 1 ), "wherein the unique code includes 
privacy information data" as ( par 0011, lines 2-3, coupler combines privacy 
information with hashed identification information) and "primary conversion data 
generation means for replacing personal data of said processing-object data with said 
unique code, to generate primary conversion data, wherein said generated primary 
conversion data includes both the processing-object data and the unique code" as 
(page 3, Paragraph 0011, lines 7-9 and Fig on page 5, the data storage 4 has 
primary conversion data that has a hash code of identification with privacy 
information ). 
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Shiraishi does not specifically disclose that the unique code includes encrypted 
privacy information data". 

However, prior art described in Shiraishi discloses a unique code that includes 
encrypted privacy information data (on page 1, par 0002, the privacy information which 
enciphered the privacy information inputted by the user). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of the invention to modify Shiraishi's invention in view of the teaching of the 
prior art in Shiraishi by including encrypted privacy information in order to prevent that a 
user's privacy information is revealed to non-authorized users ( par 0002). 

As per claim 2, Shiraishi discloses " which further comprises storage means for 
storing said primary conversion data and said processing-object data on which said 
primary conversion data are based in a state in which these data are correlated with 
each other" as (Page 3, paragraph 0011, line 7-9, The hash information and privacy 
information of identification information which were matched mutually are stored 
in the storage and Fig on page 5, numeral 4 is a storage means where primary 
conversion data and processing object data are stored ). 

As per claim 3, Shiraishi discloses wherein said unique code generation means 
comprises a reference character string generation means for generating a reference 
character string from personal data extracted by said personal data extraction means" 
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as (Fig on page 5, output from numeral 2 is the unique code of the personal data 
from the numeral 1), and "operation means for operating a predetermined processing- 
object character string by means of said one-way function using said reference 
character string as a key, to generate said unique code" as (Fig on page 5, numeral 2 
hash string from numeral 1 and output of numeral 2 is an unique number which is used 
as search key to retrieved information from numeral 4 through numeral 5 ). 

AS per claim 4, Shiraishi discloses " wherein said operation means comprises 
digit number determination means for determining an operation digit number on the 
basis of said reference character string" as (Fig on page 5, output of numeral 2 is a digit 
number of reference character string of numeral 1 ), "processing-object character string 
generation means for generating an processing-object character string having said 
operation digit number and operation execution means for operating said processing- 
object character string by means of said one-way function using said reference 
character string as a key" as ( on page 4 , par 0013, The identification information which 
is a search key is enciphered (hash processing) Fig on page 5, numeral 2 hash string 
from numeral 1 and output of numeral 2 is an unique number which is used as search 
key to retrieved information from numeral 4 through numeral 5.). 
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As per claim 9, this claim is directed to a computer readable storage medium 
and contains limitations that are substantially similar to those recited in claim 1 above, 
and accordingly is rejected for similar reasons. 

As per claim 10, this claim is directed to a computer readable storage medium 
and contains limitations that are substantially similar to those recited in claim 2 above, 
and accordingly is rejected for similar reasons 

As per claim 11, this claim is directed to a computer readable storage medium 
and contains limitations that are substantially similar to those recited in claim 3 above, 
and accordingly is rejected for similar reasons 

As per claim 12, this claim is directed to a computer readable storage medium 
and contains limitations that are substantially similar to those recited in claim 4 above, 
and accordingly is rejected for similar reasons 

8. Claims 5 and 13 are rejected under 35 U.S. C. 103 (a) as being unpatentable 
over Shiraishi et al (JP 2002-149497) in view of Yoshida et al ( JP 11045304). 

As per claim 5, Shiraishi discloses "which further comprises a secondary 
conversion data generation means for said primary conversion data to generate 
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secondary conversion data, output means for outputting said secondary conversion 
data to other apparatus, and storage means for storing said outputted secondary 
conversion data, said primary conversion data on which said secondary conversion data 
are based, said processing-object data on which said primary conversion data are 
based and records of output from said output means in a state in which these data and 
records are correlated with one another when said secondary conversion data are 
outputted from said output means" as ( Fig on page 5, output from coupler 3 is send to 
storage 4 for second conversion data in the numeral 4). 

But Shiraishi fails to disclose a secondary conversion data generation means for 
encrypting said primary conversion data to generate secondary conversion data. 

However, Yoshida discloses "which further comprises a secondary conversion 
data generation means for encrypting said primary conversion data to generate 
secondary conversion data as ( page 5, paragraph 0014-0015, line 1-8, 
Characterized by establishing an encryption means to encipher and to make it 
transmit, when transmitting the data by which central control out in the data 
control organization through a network and the data control organization is 
characterized by enciphering the data which should be out central control and 
making it store in concentration data storage equipment). 

Therefore, It would have been obvious to one of the ordinary skill in the art at the 
time of the invention was made to modify the teaching of Shiraishi by including 



Application/Control Number: 10/549,308 Page 8 

Art Unit: 2437 

encryption to the data control organization and make it transmit by enciphering to the 
concentration data storage that is taught by Yoshida because it would provide a secure 
storage of confidential data. 

As per claim 13, this claim is directed to a computer readable storage medium 
and contains limitations that are substantially similar to those recited in claim 5 above, 
and accordingly is rejected for similar reasons. 

9. Claims 6-8 are rejected under 35 U.S.C.103 (a) as being unpatentable over 
Shiraishi et al (JP 2002-149497) and further in view of Yoshida et al (JP 11045304). 

As per claim 6, Shiraishi discloses "personal data extraction means for 
extracting personal data from processing-object data" as ( page 2, paragraph 0005, 
line 1-2, An information acquisition means to acquire the privacy information as 
which this invention was inputted by the user);"unique code generation means for 
performing an operation using one-way function on the basis of personal data extracted 
by said personal data extraction means to generate a unique code" as (page 3, 
paragraph 0011, line 2-4, The coupler combines the privacy information inputted 
without minding the identification information and the hash processor by which 
has processing was carried out to generate for unique key ), "wherein the unique 
code includes encoded privacy information data" as (par 0011, lines 2-3, coupler 
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combines privacy information with hashed identification information ); "primary 
conversion data generation means for replacing the personal data of said processing- 
object data with said unique code to generate primary conversion data, wherein said 
generated primary conversion data includes both the processing-object data and the 
unique code" as (page 3, Paragraph 0012, line 1-3, a user inputs the identification 
information used as the key into the privacy information in order to convert it into 
primary conversion , page 3, Paragraph 0011, and Fig on page 5, Output of 
coupler 3 is a primary conversion data which is comprise of privacy information 
of numeral 1 with hashing value from numeral 2. coupler coupled a hash value 
from numeral 2 into value comes from numeral 1 ). 

But Shiraishi fails to disclose "secondary conversion data generation means for 
encrypting said primary conversion data to generate secondary conversion data; output 
means for outputting said secondary conversion data to said information management 
apparatus through said communication line; and storage means for storing, when said 
secondary conversion data are outputted from said output means, said outputted 
secondary conversion data, said primary conversion data as an original of said 
secondary conversion data, said processing-object data as an original of said primary 
conversion data and records of the output made by said output means, in a state in 
which they are correlated with one another". 
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Yoshida discloses "secondary conversion data generation means for encrypting 
said primary conversion data to generate secondary conversion data; output means for 
outputting said secondary conversion data to said information management apparatus 
through said communication line; and storage means for storing, when said secondary 
conversion data are outputted from said output means, said outputted secondary 
conversion data, said primary conversion data as an original of said secondary 
conversion data, said processing-object data as an original of said primary conversion 
data and records of the output made by said output means, in a state in which they are 
correlated with one another " as ( page 5, paragraph 0014-0015, line 1-8, 
Characterized by establishing an encryption means to encipher and to make it 
transmit, when transmitting the data by which central control out in the data 
control organization through a network and the data control organization is 
characterized by enciphering the data which should be out central control and 
making it store in concentration data storage equipment); receiving means for 
receiving secondary conversion data transmitted from said information management 
apparatus" as (page 8, paragraph 0035, Mne5-6, In the medical support service 
establishment, in order to be able to use the received medical data with 
application data encryption equipment); and "decryption means for decrypting 
secondary conversion data received by said receiving means to generate said primary 
conversion data" as(page 8, paragraph 0035, line 5-7, In the medical support 
service establishment, in order to be able to use the received medical data with 
application equipment, it decrypts to the original data ). 
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Therefore, It would have been obvious to one of the ordinary skill in the art at the 
time of the invention was made to modify the teaching of Shiraishi by including a 
transmission of encrypted data into storage equipment that is taught by Yoshida 
because it would provide a better protection for confidential data during transmission. 

As per claim 7, Shiraishi in view of Yoshida "wherein said information center 
apparatus further comprises data storage means for storing primary conversion data 
generated by said decryption means and processes data stored in said data storage 
means by means of said unique code as a key" as (Shiraishi, Fig on page 5, Numeral 4 
is storage for primary conversion data (output of numeral) and unique code of numeral 2 
)■ 

As per claim 8, Shiraishi in view of Yoshida "wherein said information center 
apparatus detects data containing identical code from a plurality of data containing said 
unique codes stored in said data storage means" as (Shiraishi, on page 3, par [0012], 
when retrieval device 5 retrieves data from storage 4, It is matching or detecting a 
unique key in the storage 4 with unique key from numeral 2). 
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Examiner Notes 

1 0. Examiner cites particular columns and line numbers in the references as applied 
to the claims below for the convenience of the applicant. Although the specified citations 
are representative of the teachings in the art and are applied to the specific limitations 
within the individual claim, other passages and figures may apply as well. It is 
respectfully requested that, in preparing responses, the applicant fully consider the 
references in entirety as potentially teaching all or part of the claimed invention, as well 
as the context of the passage as taught by the prior art or disclosed by the examiner. 



Conclusion 



1 1 . Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See M PEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
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extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

12. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Abu Sholeman whose telephone number is (571)270- 
7314. The examiner can normally be reached on Monday through Thursday 9:30 AM - 
7:30 PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571)272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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May 15, 2009 Abu Sholeman 

Examiner 
Art unit 2437 

/Emmanuel L. Moise/ 
Supervisory Patent Examiner, Art 
Unit 2437 



